Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: ynbmd15zn9xzqDk1v/TRafKEyY1Wzmf0w4P+K1uaO0w=
Subject key identifier: 32:4F:A0:C5:1C:C4:58:23:75:08:5A:03:C1:83:8F:65:AB:CA:7E:91
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 0194BCE0B6DA393F6F303A4868A1F2A35BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: pBGKHcyldDIAADk4VcKcqKc4ZdpTymHImlF8jJ+8GpA=)
2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:da:39:3f:6f:30:3a:48:68:a1:f2:a3:5b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=324fa0c51cc4582375085a03c1838f65abca7e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:01:79:17:e4:74:c1:77:34:06:4f:17:2c:
5e:67:66:20:a3:5e:0d:43:d2:68:cb:cc:97:a9:27:
e0:c9:e5:c0:0c:4f:2b:cf:4d:dc:9e:a6:c3:40:33:
96:99:d2:10:b6:89:7f:9e:ea:77:7a:0f:e6:17:24:
c4:15:7f:65:35:cb:fc:a9:99:8f:25:b6:8a:a1:3c:
62:d2:f1:f8:27:5e:3b:27:11:d5:72:c7:e4:22:fd:
9e:0e:5d:3f:20:63:58:b0:6c:fd:42:d8:df:81:67:
86:7c:3f:1d:15:b1:2c:e7:06:f1:88:d3:fa:9f:ef:
ca:4e:2c:de:d9:2d:c2:90:b6:96:8e:58:b8:e5:1b:
c7:32:8f:eb:18:3e:2c:9b:2b:89:0e:89:89:45:11:
25:35:0f:0b:f9:a7:c5:75:fc:55:88:3a:1e:b0:57:
ad:60:57:36:ca:37:9d:12:27:b5:00:9c:fc:6a:6d:
8d:45:c2:de:32:aa:66:06:94:3d:b4:07:66:2b:51:
fc:ac:03:26:11:06:d8:68:ee:b7:4c:80:91:d3:20:
c9:53:94:08:9e:6c:a5:e9:21:11:12:05:f6:02:62:
0c:d9:ed:ef:64:9b:06:0b:d3:7c:33:9c:aa:e7:7b:
28:ef:c5:87:1b:18:c5:ff:4c:53:65:61:51:50:03:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:A0:C5:1C:C4:58:23:75:08:5A:03:C1:83:8F:65:AB:CA:7E:91
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:46:e8:20:19:c1:da:cc:f3:e4:6d:0b:0a:71:f9:53:68:
0c:1c:9e:2b:90:09:60:d7:e1:da:c7:59:2c:ad:cb:3b:a9:22:
57:86:ee:08:91:8b:24:89:c0:9f:eb:34:c4:6c:83:08:86:c7:
23:0a:5c:9c:90:0a:c2:3d:e8:b1:48:ad:ad:1b:4a:d8:9d:d6:
60:0a:33:5a:14:f1:05:c5:ad:78:2f:22:92:78:a2:39:d3:93:
f7:4d:e2:70:fa:38:17:25:3b:3b:bb:27:d9:2d:8b:ca:3a:04:
c5:1c:31:a0:02:af:d5:98:fc:79:5c:7c:b0:a3:d4:ce:ca:4f:
46:12:51:b8:6c:e0:a5:0f:2d:5c:b8:b2:be:62:90:51:67:c5:
de:df:f5:59:fa:67:1f:1b:f6:f8:4e:ea:25:3a:1d:b5:55:d6:
2e:f2:c5:bb:23:da:5f:c0:c2:09:1f:7e:84:6c:c7:63:3b:a2:
7f:ad:57:63:9f:8a:93:ba:ea:4d:87:6d:74:5f:41:44:d7:00:
0b:39:96:29:de:7b:19:30:69:b5:04:4f:eb:60:08:7a:09:9d:
2c:17:42:e7:50:96:8d:c7:94:36:60:86:ac:6a:d5:70:b7:44:
14:7d:7a:a6:1b:c2:77:41:9a:f1:7a:b1:24:36:12:26:7d:8a:
d0:e1:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:26 2025 by rpki-client